CVE Watch—

CVE-2023-6548

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

3.2%

p88

KEV

SIM

17 de jan. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

3.2%EPSS · 30 dias3.2%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Citrix / NetScaler ADC and NetScaler Gateway

Vulnerabilidade

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Adicionado ao KEV

17 de jan. de 2024

Corrigir até

24 de jan. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549; https://nvd.nist.gov/vuln/detail/CVE-2023-6548

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-84529.8 CRÍ

63.3%

KEV—69Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability71d CVE-2023-49669.4 CRÍ

100.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability98d CVE-2023-35199.8 CRÍ

100.0%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability93d CVE-2023-6549—

99.1%

KEV—80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability—